Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
File: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft (raw, json)
Hash identifier: dS2tFUT8yQj+iq86zMns1I6KMGqaEWt18Wbr9Q3DF5Y=
Subject key identifier: C9:21:6D:C7:86:44:2A:03:C0:8B:1D:8C:0D:CF:74:BA:72:7F:43:3B
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 0198D77392B70779A3258D2A5104C9B69B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
Manifest number: 1656
Signing time: Sat 23 Aug 2025 15:02:12 +0000
Manifest this update: Sat 23 Aug 2025 15:02:12 +0000
Manifest next update: Sun 24 Aug 2025 15:02:12 +0000
Files and hashes: 1: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl (hash: 0yutW1Vt5xkqsTH9wLffo6rw25kfRKKxkUIjcGhQfgQ=)
2: ULw_e6rY6wER2z1dGFmp31jEgd0.roa (hash: MY5YBBTJCozx9Da4ab7Dr9d2mlZWfjLXtBL3DR2CzxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:92:b7:07:79:a3:25:8d:2a:51:04:c9:b6:9b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Aug 23 15:02:12 2025 GMT
Not After : Aug 24 15:02:12 2025 GMT
Subject: CN=c9216dc786442a03c08b1d8c0dcf74ba727f433b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:0d:83:0a:2b:96:8c:11:bb:d6:ed:53:bf:
3e:a5:7c:89:06:1d:40:4d:d8:7e:a4:f7:0d:89:9e:
34:e8:59:51:b8:89:d4:e9:7c:fe:e3:4b:e6:3b:27:
61:3d:e9:d2:8d:43:cf:90:0f:43:72:ae:82:80:51:
37:ae:a0:e7:c4:ff:f2:e6:22:f6:af:69:77:c5:e2:
83:79:f3:b6:63:bd:f1:f7:de:e3:36:5b:cb:d9:f0:
e5:22:37:41:04:90:2f:13:6f:bc:3b:aa:8e:03:e4:
cb:1c:10:55:0e:e2:5d:f8:2d:2d:25:54:09:9c:b2:
ab:bb:7b:7a:5f:38:4f:0e:8f:ad:9b:b2:1d:73:df:
d5:31:c8:39:98:b6:0a:7b:0e:d6:e8:88:42:d0:a2:
80:85:14:7c:2f:e7:29:50:41:24:ba:fe:2c:dd:d1:
46:11:f6:30:ba:dd:c2:81:7b:cb:1e:f7:2e:4e:0f:
50:4e:ba:fe:eb:4d:39:9f:3f:a2:c3:a7:07:c0:09:
f6:e7:20:d4:15:dd:44:a3:4e:f6:c9:dd:02:62:04:
ca:50:86:b4:ae:71:ab:97:27:6d:1d:d0:8d:76:4d:
05:d3:4a:86:38:18:75:1b:4f:bb:68:4b:f0:d9:a8:
c4:b1:df:05:d2:a0:85:8d:d0:9d:a9:da:4d:64:2b:
a1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:6D:C7:86:44:2A:03:C0:8B:1D:8C:0D:CF:74:BA:72:7F:43:3B
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:93:97:92:df:ed:64:21:ea:fe:36:bb:d7:e1:aa:c3:ab:6a:
4e:ec:fe:2f:a4:f4:c6:f4:7b:86:14:f7:cb:5d:b4:37:d3:05:
d1:36:11:ca:6a:32:13:46:99:68:1d:84:34:e7:52:89:d1:2d:
49:ae:3e:17:6d:74:0f:c6:7d:69:84:eb:5a:8a:67:c8:a9:ab:
63:8e:81:55:c1:00:c1:9e:6f:3c:e5:51:c8:80:22:68:82:bf:
21:49:fb:df:94:b5:d5:1a:dc:05:85:ed:65:a3:76:89:d6:8c:
a6:91:9c:b4:cb:dd:14:3b:0a:8c:f5:be:f9:ef:de:0d:5a:f9:
ed:eb:aa:08:1a:73:7a:30:07:8f:8c:ad:2f:0d:b7:9a:f5:e5:
a3:ee:ff:c3:13:a1:4f:1d:68:c6:80:f1:65:a9:fa:d6:fa:b1:
de:49:07:e5:d1:e9:a0:22:86:d2:41:0f:be:06:66:5f:e8:e1:
33:5d:05:d1:50:97:0d:00:b3:38:e5:02:39:14:1b:aa:ba:50:
2b:c6:08:da:05:53:d6:97:c6:25:8a:ff:7b:c3:b5:cc:71:b4:
c2:0e:b8:80:89:87:06:2c:3a:b3:35:fb:d2:cf:66:2c:97:7b:
72:62:26:ac:4a:2f:d9:d9:df:5b:d5:db:4d:f7:9f:2e:47:26:
e7:df:92:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:16:36 2025 by rpki-client